Skip to content
CookieTosser

What does unep.org track?

Before any consent, unep.org loaded 10 tracking companies and set 19 advertising or analytics cookies.

That's more tracking companies than 92% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.unep.org once and clicking nothing. How we scan

Tracking companies
10
Tracking cookies
19
Third-party hosts
34
Cookies in total
26

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

4 of the 15 companies it contacted before consent were social media companies.

  • Google Ads

    stats.g.doubleclick.net, www.google.de, ad.doubleclick.net

    6 requestsAdvertising
  • Microsoft Advertising

    bat.bing.com, bat.bing.net

    4 requestsAdvertising
  • Meta

    connect.facebook.net, www.facebook.com, platform.instagram.com, www.instagram.com

    9 requestsSocial media
  • TikTok

    analytics.tiktok.com, analytics-ipv6.tiktokw.us

    7 requestsSocial media
  • X (Twitter)

    platform.twitter.com, static.ads-twitter.com, syndication.twitter.com, t.co

    6 requestsSocial media
  • LinkedIn

    snap.licdn.com, px.ads.linkedin.com

    4 requestsSocial media
  • Google Analytics

    region1.analytics.google.com, www.googletagmanager.com, www.google-analytics.com, region1.google-analytics.com

    11 requestsAnalytics
  • Crazy Egg

    script.crazyegg.com

    4 requestsAnalytics
  • Contentsquare

    t.contentsquare.net

    3 requestsAnalytics
  • Mouseflow

    cdn.mouseflow.com

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • unenvironment.org

    cdn.unenvironment.org

    11 requestsUnclassified
  • flickr.com

    embedr.flickr.com, widgets.flickr.com

    3 requestsUnclassified
  • Google

    fonts.googleapis.com, www.google.com, fonts.gstatic.com, www.googleoptimize.com

    7 requestsFunctional
  • Cloudflare

    cdnjs.cloudflare.com

    9 requestsContent delivery
  • Font Awesome

    use.fontawesome.com

    2 requestsContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was muc_ads, from X (Twitter), lasting about 13 months.

CookiePurposeSet byLasts
_fbpAdvertisingunep.org3 months
_gcl_auAdvertisingunep.org3 months
_tt_enable_cookieAdvertisingunep.org13 months
_ttpAdvertisingtiktok.com (third party)13 months
_ttpAdvertisingunep.org13 months
bcookieAdvertisinglinkedin.com (third party)12 months
lidcAdvertisinglinkedin.com (third party)1 day
muc_adsAdvertisingt.co (third party)13 months
personalization_idAdvertisingtwitter.com (third party)13 months
ttcsidAdvertisingunep.org13 months
ttcsid_D9TIKR3C77UD9334HQE0Advertisingunep.org13 months
_ce.sAnalyticsunep.org12 months
_dc_gtm_UA-59519586-1Analyticsunep.orgUnder a day
_gaAnalyticsunep.org13 months
_ga_1DQHHGHPWRAnalyticsunep.org13 months
_ga_CMH16JZ1F1Analyticsunep.org13 months
_ga_P8SM9FN2WZAnalyticsunep.org13 months
_gat_UA-59519586-1Analyticsunep.orgUnder a day
_gidAnalyticsunep.org1 day
_twpidUnclassifiedunep.org13 months
_twsidUnclassifiedunep.org13 months
__cf_bmFunctionaltwitter.com (third party)Under a day
__cf_bmFunctionalt.co (third party)Under a day
__cf_bmFunctionallinkedin.com (third party)Under a day
cf_clearanceFunctionalunep.org12 months
li_gcFunctionallinkedin.com (third party)6 months

The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.